CISA warns exploited Cisco flaws are a serious risk, so patch now

• CISA warns agencies failed to properly patch two actively exploited Cisco firewall vulnerabilities
• CVE-2025-20333 and CVE-2025-20362 were linked to the ArcaneDoor campaign targeting government networks
• Over 32,000 devices remain vulnerable despite emergency directives and patching efforts

The US Cybersecurity and Infrastructure Security Agency (CISA) is warning Federal Civilian Executive Branch agencies (FCEB) that some of them failed to properly patch two important Cisco vulnerabilities being actively exploited in the wild.

As a result, these agencies continue to be at risk of malware, infostealer, and possibly even ransomware attacks.